Legal
Privacy Policy
Effective date: May 11, 2026
Cite AI, LLC ("we," "us," or "our") operates usecite.com and the associated platform (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices. By using the Service, you agree to this policy.
1. Information We Collect
We collect the following categories of information:
- Account data — your email address, organization name, and role when you register.
- Query and configuration data — the monitored queries, brand domains, and competitor domains you add to your workspace.
- Usage data — pages visited, features used, timestamps, and API call logs generated during your use of the Service.
- Report data — AI-generated answer snapshots, citation records, sentiment scores, and risk assessments produced on your behalf and stored in your account.
- Authentication data — tokens issued by AWS Cognito that verify your identity. We do not store your password directly.
- Communications — emails you send to us and responses we provide.
We do not collect payment card details directly; payment processing (when introduced) will be handled by a certified third-party processor.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account and workspace
- Run daily LLM probes against the queries you configure and deliver reports to your dashboard
- Send transactional emails (e.g., account verification, usage alerts, share-of-voice shift notifications)
- Improve the Service using aggregated, anonymized usage data — individual query content is never shared with or used to train third-party LLM providers on your behalf
- Respond to support requests and enforce our Terms of Service
- Comply with legal obligations
We will not sell your personal data or use it to serve third-party advertising.
3. How We Share Your Information
We share your information only in the following circumstances:
- Service providers — We use AWS (Cognito for authentication, DynamoDB for structured data, S3 for report storage, and Lambda for compute) as our primary infrastructure provider. These providers process data only on our behalf and under confidentiality obligations.
- LLM API providers — To perform answer-engine monitoring, your configured query text is sent to third-party LLM APIs (currently OpenAI, Anthropic, Google, and Meta/Llama). These providers process query text under their own terms; we recommend reviewing their policies if you include sensitive information in queries.
- Legal requirements — We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.
- Business transfers — If Cite AI, LLC is acquired or merges with another entity, your information may transfer to the successor. We will notify you via email or in-app notice before any such transfer occurs.
4. Data Retention
We retain your account data for as long as your account is active. Report snapshots and citation records are retained for 12 months from the date of generation; older data is deleted on a rolling basis. If you close your account, we will delete your personal data within 30 days, except where retention is required by law. You may request an export of your data at any time by contacting us.
5. Security
We use industry-standard safeguards including encryption at rest (AES-256 via AWS) and in transit (TLS), access controls, and audit logging. However, no security system is impenetrable. We cannot guarantee that your information will never be accessed, disclosed, or altered in a manner inconsistent with this policy, and we accept no liability for unauthorized access beyond what is required by applicable law.
6. International Data Transfers
Cite AI, LLC is based in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US. By using the Service, you consent to this transfer. We apply appropriate safeguards consistent with applicable data protection law.
7. Your Rights and Choices
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate information
- Request deletion of your personal data (subject to legal retention obligations)
- Opt out of marketing emails using the unsubscribe link in any email we send
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at info@usecite.com.
8. Children
The Service is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice in the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
10. Contact
For privacy questions or to exercise your rights, contact us at info@usecite.com.